This split is intentional: Codex discovers the skills from skills/, while the bootstrap skill reads its larger template payload from vendor/. The installer does not copy build-tools/ into ~/.codex.